CVE-2024-52504
Description
A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SIPROTEC 4 6MD665 (All versions), SIPROTEC 4 7SA522 (All versions), SIPROTEC 4 7SA6 (All versions < V4.78), SIPROTEC 4 7SD5 (All versions < V4.78), SIPROTEC 4 7SD610 (All versions < V4.78), SIPROTEC 4 7SJ61 (All versions), SIPROTEC 4 7SJ62 (All versions), SIPROTEC 4 7SJ63 (All versions), SIPROTEC 4 7SJ64 (All versions), SIPROTEC 4 7SJ66 (All versions), SIPROTEC 4 7SS52 (All versions), SIPROTEC 4 7ST6 (All versions), SIPROTEC 4 7UM61 (All versions), SIPROTEC 4 7UM62 (All versions), SIPROTEC 4 7UT612 (All versions), SIPROTEC 4 7UT613 (All versions), SIPROTEC 4 7UT63 (All versions), SIPROTEC 4 7VE6 (All versions), SIPROTEC 4 7VK61 (All versions), SIPROTEC 4 7VU683 (All versions), SIPROTEC 4 Compact 7RW80 (All versions), SIPROTEC 4 Compact 7SD80 (All versions), SIPROTEC 4 Compact 7SJ80 (All versions), SIPROTEC 4 Compact 7SJ81 (All versions), SIPROTEC 4 Compact 7SK80 (All versions), SIPROTEC 4 Compact 7SK81 (All versions). Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted.
How to fix
- Siemens SIPROTEC 4 7SA6V4.78 or later
- Siemens SIPROTEC 4 7SD5V4.78 or later
- Siemens SIPROTEC 4 7SD610V4.78 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens SIPROTEC 4 6MD61 | 0 | — |
| Siemens SIPROTEC 4 6MD63 | 0 | — |
| Siemens SIPROTEC 4 6MD66 | 0 | — |
| Siemens SIPROTEC 4 6MD665 | 0 | — |
| Siemens SIPROTEC 4 7SA522 | 0 | — |
| Siemens SIPROTEC 4 7SA6 | v < V4.78 | V4.78 |
| Siemens SIPROTEC 4 7SD5 | v < V4.78 | V4.78 |
| Siemens SIPROTEC 4 7SD610 | v < V4.78 | V4.78 |
| Siemens SIPROTEC 4 7SJ61 | 0 | — |
| Siemens SIPROTEC 4 7SJ62 | 0 | — |
| Siemens SIPROTEC 4 7SJ63 | 0 | — |
| Siemens SIPROTEC 4 7SJ64 | 0 | — |
| Siemens SIPROTEC 4 7SJ66 | 0 | — |
| Siemens SIPROTEC 4 7SS52 | 0 | — |
| Siemens SIPROTEC 4 7ST6 | 0 | — |
| Siemens SIPROTEC 4 7UM61 | 0 | — |
| Siemens SIPROTEC 4 7UM62 | 0 | — |
| Siemens SIPROTEC 4 7UT612 | 0 | — |
| Siemens SIPROTEC 4 7UT613 | 0 | — |
| Siemens SIPROTEC 4 7UT63 | 0 | — |
| Siemens SIPROTEC 4 7VE6 | 0 | — |
| Siemens SIPROTEC 4 7VK61 | 0 | — |
| Siemens SIPROTEC 4 7VU683 | 0 | — |
| Siemens SIPROTEC 4 Compact 7RW80 | 0 | — |
| Siemens SIPROTEC 4 Compact 7SD80 | 0 | — |
| Siemens SIPROTEC 4 Compact 7SJ80 | 0 | — |
| Siemens SIPROTEC 4 Compact 7SJ81 | 0 | — |
| Siemens SIPROTEC 4 Compact 7SK80 | 0 | — |
| Siemens SIPROTEC 4 Compact 7SK81 | 0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.